$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json) Hash identifier: tbyvuEyC8dCzU2Vsqg3Vuqqmqho4zCcAytKohX3ScAc= Subject key identifier: 44:1E:D2:6C:14:EE:7E:49:13:4E:0E:22:B9:FE:5E:C5:AA:8C:AA:62 Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 Certificate issuer: /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft Manifest number: 33 Signing time: Sat 23 Aug 2025 07:51:32 +0000 Manifest this update: Sat 23 Aug 2025 07:51:32 +0000 Manifest next update: Sat 30 Aug 2025 07:51:31 +0000 Files and hashes: 1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: 5nK+1tFTn9BfWtMHZ/DVIA4gIMPBGFNJtT24AwOnh2E=) 2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: e/qoVpmKt8fCZimHa48idWx8ZDlS0KQsXYwTkjXC6NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Validity Not Before: Aug 23 07:51:32 2025 GMT Not After : Aug 30 07:51:31 2025 GMT Subject: CN=68a97304-9dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:b9:ec:ad:65:51:36:2c:fe:fc:f7:c0:44: 10:82:7f:68:a5:b2:d0:f7:67:70:84:ff:5f:40:8b: 13:34:22:ca:0a:a4:9a:5e:cb:5c:2a:40:9d:33:15: c8:5d:d0:05:f2:fc:3e:ab:58:13:af:4f:5c:a7:05: 85:10:5d:44:11:0a:e5:47:9e:76:b9:0e:40:5f:62: 7e:cb:81:03:c2:89:b6:a7:84:23:25:f6:73:ed:29: f5:e8:b1:30:29:c3:f1:45:3b:cf:04:1f:58:be:f1: 49:be:95:4f:9b:5a:36:93:d8:29:5c:2e:82:1b:f6: b7:f7:78:17:d1:0f:31:45:7c:74:7c:ca:7c:65:f4: bb:4b:b1:1c:7e:39:f4:40:0f:13:63:c0:db:22:4a: f5:e3:be:db:3a:7d:69:b4:b6:c5:62:e8:e5:0c:4a: bc:5d:51:f8:b7:76:d9:6b:41:16:d5:11:ea:db:94: 25:3a:fc:60:fb:27:08:f3:40:de:34:0b:e6:fd:80: 61:c1:56:06:58:b2:5e:63:1c:be:23:1c:2a:5b:b5: e8:27:71:35:06:8e:11:cd:af:1a:2f:fb:0b:92:0d: 1c:83:cd:e4:7c:51:e8:9e:81:30:1b:2c:f7:78:fd: 8f:ef:e6:f0:02:6e:7b:cd:94:b0:89:74:f6:7b:95: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1E:D2:6C:14:EE:7E:49:13:4E:0E:22:B9:FE:5E:C5:AA:8C:AA:62 X509v3 Authority Key Identifier: keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:74:e9:8d:6e:0b:49:15:83:8d:67:87:49:2e:9e:72:49:5a: 7d:56:a2:df:19:28:75:b2:9d:60:19:f5:55:e7:1b:de:e4:37: cf:da:31:c9:1c:b9:04:ee:2f:da:cd:59:5a:51:93:df:2e:0d: d9:1e:76:c5:8e:d0:86:52:d5:51:98:52:6a:2c:36:f7:a6:61: fa:6d:2a:c7:ae:69:d9:14:26:4a:56:d7:bd:fb:24:94:d7:b5: 9e:fe:fc:67:d6:ac:9c:93:12:a5:8c:2f:f1:7c:b5:5b:72:42: 00:55:b0:f0:89:54:30:2c:d0:a4:94:7d:14:9d:fa:ee:cf:fe: e0:ba:f6:ae:d1:12:bb:ba:1f:e0:60:91:5c:77:af:29:8f:03: 8d:6b:2f:25:90:ae:89:76:24:2b:a3:11:be:b8:af:a8:dc:a1: f7:df:a2:30:45:ee:52:81:2b:87:53:e8:f0:17:ca:4e:de:d9: 00:ca:32:b9:a8:f9:54:64:2b:9e:e6:e4:e8:6a:44:34:ca:39: a2:c1:de:3a:62:2e:86:b0:30:a5:cf:fc:93:0f:39:b9:c1:53: 86:58:04:02:f2:f6:a1:06:44:a9:ba:13:c3:e4:21:f0:73:8b: 6e:0f:0c:cd:e9:9b:53:04:62:0d:61:99:fc:16:40:c3:0b:ab: 7e:7d:b5:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTVCMzExMC8GA1UEBRMoMkQwMUExOTQyQkFGRDlEM0IzMUREQkZFNzUzMjRCQUQ2 MkI2MDk1ODAeFw0yNTA4MjMwNzUxMzJaFw0yNTA4MzAwNzUxMzFaMBgxFjAUBgNV BAMTDTY4YTk3MzA0LTlkYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVjrnsrWVRNiz+/PfARBCCf2ilstD3Z3CE/19AixM0IsoKpJpey1wqQJ0zFchd 0AXy/D6rWBOvT1ynBYUQXUQRCuVHnna5DkBfYn7LgQPCibanhCMl9nPtKfXosTAp w/FFO88EH1i+8Um+lU+bWjaT2ClcLoIb9rf3eBfRDzFFfHR8ynxl9LtLsRx+OfRA DxNjwNsiSvXjvts6fWm0tsVi6OUMSrxdUfi3dtlrQRbVEerblCU6/GD7JwjzQN40 C+b9gGHBVgZYsl5jHL4jHCpbtegncTUGjhHNrxov+wuSDRyDzeR8UeiegTAbLPd4 /Y/v5vACbnvNlLCJdPZ7lZlVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURB7SbBTu fkkTTg4iuf5exaqMqmIwHwYDVR0jBBgwFoAULQGhlCuv2dOzHdv+dTJLrWK2CVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1NUIzLzI2QjFFMThBMzFF RDExRjA4OURDNzczQkM0RjlBRTAyL0xRR2hsQ3V2MmRPekhkdi1kVEpMcldLMkNW Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFFHaGxDdXYyZE96SGR2LWRUSkxyV0syQ1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 NUIzLzI2QjFFMThBMzFFRDExRjA4OURDNzczQkM0RjlBRTAyL0xRR2hsQ3V2MmRP ekhkdi1kVEpMcldLMkNWZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFN06Y1uC0kVg41nh0kunnJJWn1Wot8ZKHWynWAZ9VXnG97kN8/aMckc uQTuL9rNWVpRk98uDdkedsWO0IZS1VGYUmosNvemYfptKseuadkUJkpW1737JJTX tZ7+/GfWrJyTEqWML/F8tVtyQgBVsPCJVDAs0KSUfRSd+u7P/uC69q7REru6H+Bg kVx3rymPA41rLyWQrol2JCujEb64r6jcofffojBF7lKBK4dT6PAXyk7e2QDKMrmo +VRkK57m5OhqRDTKOaLB3jpiLoawMKXP/JMPObnBU4ZYBALy9qEGRKm6E8PkIfBz i24PDM3pm1MEYg1hmfwWQMMLq359tfo= -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:34 2025 by rpki-client